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The following Listing of Claims will replace all prior versions, and listings, of 
claims in the present application: 
Listing of Claims: 

5 1. (Currently amended) A method for protected execution of a 

cryptographic calculation, in which a ke y (12) with at least two key parameters (p, q, 
pinv, sp, dp, sq, dq) is drawn on, wherein an integrity check (30, 3 4 , 4 0, 5 4 ) of the key 
(43) is performed in th e m e thod, in order to prevent a cryptographic attack in which 
conclusions are drawn as to at least one second key parameter (p, q, pinv, sp, dp, sq, 
10 dq) by corrupting at least one first key parameter (p, q, pinv, sp, dp, sq, dq), 
characterized in that at least one k e y param e ter (dp, dq) is th e product of a valu e 
r e quir e d for the cryptographic calculation tim e s a saf e guard valu e (sp, sq), and in that 
th e int e grity ch e ck (30, 3 4 , 4 0, 5 4 ) includes a divisibility ch e ck . 

15 2-13. Canceled. 

14. (New) A method as claimed in claim 1, wherein in the integrity check 
it is determined whether the value of at least one key parameter is contained in a range 
of valid values, wherein the range is non-contiguous in that it has a plurality of gaps. 

20 

15. (New) A method as claimed in claim 1, wherein in the integrity check 
it is determined whether at least two key parameters are in a predetermined 
relationship to one another. 
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16. (New) A method as claimed in claim 1, wherein the integrity check 
includes a multiplicative operation, in particular a divisibility test. 

17. (New) A method as claimed in claim 1, wherein in the integrity check 
5 it is checked whether at least one of the key parameters is evenly divisible by the 

safeguard value. 

18. (New) A method as claimed in claim 1, wherein in the integrity check 
it is checked whether at least one value which differs from one of the key parameters 

10 by a multiple of a safeguard value is evenly divisible by the safeguard value. 

19. (New) A method as claimed in claim 1, wherein in the integrity check 
a checksum stored with the key parameters is compared with a checksum newly 
calculated after passing of the key parameters. 

15 

20. (New) A method as claimed in claim 1, wherein, to check the 
integrity, important parameters to be passed are multiply passed and checked for 
identity after passing. 

20 21. (New) A method as claimed in claim 1 , wherein the cryptographic 

calculation is one of a decryption in an RSA method and a signature generation in an 
RSA method. 
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22. (New) A method as claimed in claim 21, wherein the RSA method is 
an RSA-CRT method. 

23. (New) A method as claimed in claim 21, wherein in the cryptographic 
5 calculation at least one exponentiation operation is performed and in the integrity 

check it is checked whether the exponent used in the exponentiation operation is 
evenly divisible by a safeguard value. 

24. (New) A method as claimed in claim 23, wherein in the cryptographic 
10 calculation an exponent blinding method is applied for protection against spying. 

25. (New) A method as claimed in claim 21, wherein the prime factors of 
the RSA method are multiplied by a masking parameter and the error freedom of the 
calculation sequence is checked by an equality check modulo the masking parameter. 

15 

26. (New) A method as claimed in claim 1, wherein at least one key 
parameter is the product of a value required for the cryptographic calculation times a 
safeguard value, and wherein the integrity check includes a divisibility check. 

20 27. (New) A method for determining a key for a cryptographic calculation 

with at least two key parameters, the key being adapted to be used in a method for 
protected execution of a cryptographic calculation wherein an integrity check of the 
key is performed in order to prevent a cryptographic attack in which conclusions are 
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drawn as to at least one second key parameter by corrupting at least one first key 
parameter. 

28. (New) A method as claimed in claim 27, characterized in that at least 
5 one key parameter is obtained by multiplication of a value required for the 

cryptographic calculation by a safeguard value. 

29. (New) A method as claimed in claim 27, wherein at least one key 
parameter is the product of a value required for the cryptographic calculation times a 

10 safeguard value, and wherein the integrity check includes a divisibility check. 

30. (New) A computer program product which has program commands to 
cause a processor to execute a method for protected execution of a cryptographic 
calculation, in which a key with at least two key parameters is drawn on, wherein an 

15 integrity check of the key is performed in order to prevent a cryptographic attack in 
which conclusions are drawn as to at least one second key parameter by corrupting at 
least one first key parameter. 

31. (New) A computer program product as claimed in claim 30, wherein 
20 at least one key parameter is the product of a value required for the cryptographic 

calculation times a safeguard value, and wherein the integrity check includes a 
divisibility check. 
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32. (New) A portable data carrier set up for executing a method for 
protected execution of a cryptographic calculation, in which a key with at least two 
key parameters is drawn on, wherein an integrity check of the key is performed in 
order to prevent a cryptographic attack in which conclusions are drawn as to at least 

5 one second key parameter by corrupting at least one first key parameter. 

33. (New) A portable data carrier as claimed in claim 32, wherein the data 
carrier is one of a smart card and a chip module. 

10 34. (New) A portable data carrier as claimed in claim 32, wherein at least 

one key parameter is the product of a value required for the cryptographic calculation 
times a safeguard value, and wherein the integrity check includes a divisibility check. 
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